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IN THE CLAIMS 



Please amend Claims 1- 20 as follows: 




1 . (Original) For use in a wireless network comprising a plurality of base stations, each 
of said base stations capable of communicating with a plurality of mobile stations, a security device 
capable of preventing an improvisioned one of said plurality of mobile stations from accessing an 

0. . . .. 

^ Intemet protocol (IP) data network through said wireless network, said security device composing: 
a first controller capable of receiving from said improvisioned mobile station an IP data 
packet comprising an IP packet header and an IP packet payload and replacing said IP packet header 
with a replacement EP packet header comprising an IP address of a selected one of at least one 
provisioning server of said wireless network. 

2. (Original) The security device set forth in Claim 1 wherein said first controller is 
disposed in at least one of said plurality of base stations. 

3. (Original) The security device set forth in Claim 1 wherein said first controller is 
disposed in a mobile switching center of said wireless network. 

4. (Original) The security device set forth in Claim 1 fiirther comprising a second 
controller capable of determining that said unprovisioned mobile station is unprovisioned. 



(Original) The security device set forth in Claim 1 wherein said second controller 
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determines that said unprovisioned mobile station is unprovisioned if said unprovisioned mobile 
station is unable to authenticate to said wireless network. 

6. (Original) The security device set forth in Claim 1 wherein said second controller 
determines that said improvisioned mobile station is unprovisioned according to a predetermined 
telephone number associated with a service provisioning process selected by said unprovisioned 
mobile station. 

7. (Original) The security device set forth in Claim 1 wherein said second controller 
determines that said unprovisioned mobile station is unprovisioned according to data retrieved from 
a home location register associated with said wireless network, 

8. (Original) The security device set forth in Claim 1 wherein said first controller selects 
said least one provisioning server by selecting said IP address in said replacement IP packet header 
according to a load spreading algorithm. 

9. (Original) A wireless network comprising: 

a plurality of base stations, each of said base stations capable of communicating with a 
plurality of mobile stations; 

at least one provisioning server; and 

a security device capable of preventing an improvisioned one of said plurality of mobile 
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stations from accessing an Internet protocol (IP) data network through said wireless network, said 

security device comprising: 

a first controller capable of receiving from said unprovisioned mobile station an IP 
data packet comprising an IP packet header and an IP packet payload and replacing said IP 
packet header with a replacement EP packet header comprising an IP address of a selected 
one of said at least one provisioning server. 

10. (Original) The wireless network set forth in Claim 9 wherein said first controller is 
disposed in at least one of said plurality of base stations. 

1 1 . (Original) The wireless network set forth in Claim 9 wherein said first controller is 
disposed in a mobile switching center of said wireless network. 

12. (Original) The wireless network set forth in Claim 9 fiirther comprising a second 
controller capable of determining that said unprovisioned mobile station is unprovisioned. 

13. (Original) The wireless network set forth in Claim 9 wherein said second controller 
determines that said unprovisioned mobile station is unprovisioned if said unprovisioned mobile 
station is unable to authenticate to said wireless network. 



14. (Original) The wireless network set forth in Claim 9 wherein said second controller 
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determines that said unprovisioned mobile station is unprovisioned according to a predetermined 
telephone number associated with a service provisioning process selected by said unprovisioned 
mobile station. 

15. (Original) The wireless network set forth in Claim 9 wherein said second controller 
determines that said unprovisioned mobile station is unprovisioned according to data retrieved from 
a home location register associated with said wireless network. 

16. (Original) The wireless network set forth in Claim 9 wherein said first controller 
selects said least one provisioning server by selecting said IP address in said replacement IP packet 
header according to a load spreading algorithm. 

1 7 . (Original) For use in a wireless network comprising a plurality of base stations, each 
of the base stations capable of communicating with a plurality of mobile stations, a method of 
preventing an unprovisioned one of the plurality of mobile stations from accessing an Internet 
protocol (IP) data network through the wireless network, the method comprising the steps of 

receiving from the unprovisioned mobile station an IP data packet comprising an IP packet 

header and an BP packet payload; 

determining that the unprovisioned mobile station is unprovisioned; and 

replacing the IP packet header with a replacement IP packet header comprising an IP address 

of a selected one of at least one provisioning server of the wireless network. 
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18. (Original) The method set forth in Claim 17 wherein the step of determining 
comprises the step of determining that the unprovisioned mobile station is unable to authenticate to 
the wireless network. 

19. (Original) The method set forth in Claim 17 wherein the step of determining 
comprises the step of determining that the unprovisioned mobile station selected a predetermined 
telephone number associated with a service provisioning process. 

20. (Original) The method set forth in Claim 1 7 wherein the step of determining that the 
unprovisioned mobile station is unprovisioned comprises the step of examining data retrieved from a 
home location register associated with the wireless network. 



